PCI DSS

The security standard that governs how hotels and vendors handle credit card data.

PCI DSS is a contractual standard imposed by the major card networks (Visa, Mastercard, Amex). Hotels and their software vendors must store, process, and transmit card data in compliant ways or risk fines and loss of card-acceptance privileges. Modern PMS and payments platforms tokenise card numbers so the hotel never stores the raw PAN, which significantly reduces PCI scope.